What if your patients’ or clients’ most sensitive data ended up in the hands of a cybercriminal group?

That’s exactly what happened to Freedman HealthCare, a U.S.-based data analytics firm serving state agencies, healthcare providers, and insurance companies. In a breach that could impact thousands, hackers claim to have stolen 52.4 GB of data across 42,204 files underscoring how vulnerable even well-established organizations are today.

Who’s Behind the Attack? Meet “World Leaks”

Formerly known as Hunters International, the group now calling itself World Leaks is notorious for its aggressive tactics: data exfiltration, double extortion, and public data dumps designed to damage reputations and force payouts.

Some of their recent high-profile victims include:

  • Austal USA (shipbuilding)
  • Toyota Brazil
  • NanoLumens (digital displays)
  • Caxton and CTP (publishing)
  • Frederick Wildman and Sons (wine & spirits)
  • Kablutronik SRL (electronics manufacturing)

Now, healthcare and insurance organizations are in their crosshairs. World Leaks is threatening to leak Freedman HealthCare’s stolen data—data that could include sensitive health records, financials, and proprietary information.

What Makes You a Target?

Cybercriminals don’t just go after big names anymore. They target any organization with valuable data band healthcare, insurance, and professional services are high on that list.

Here are 3 vulnerabilities attackers exploit most often:

1. Untrained or Unaware Employees

Phishing remains the #1 method of attack. A single click on a malicious link or the accidental sharing of login credentials can expose your entire network.

2. Remote Work Weak Spots

Hybrid and remote environments often run on unsecured home networks or personal devices—making them an easy gateway for cyber threats.

3. Outdated Security Infrastructure

Firewalls and antivirus software aren’t enough. Without multi-layered protection, constant monitoring, and endpoint security, you’re leaving doors wide open.

5 Actionable Steps to Prevent a Breach

Security isn’t about luck, it’s about preparation. Here’s how to strengthen your defense immediately:

1. Conduct Ongoing Cybersecurity Awareness Training

Equip your team to spot phishing attempts, report suspicious activity, and avoid risky behavior. Your people are your first line of defense.

2. Implement the 3-2-1 Backup Rule

Keep three copies of your data, store them on two different media types, and make sure one copy is offsite or cloud-based. This protects your business from ransomware and accidental loss.

Critical data to back up includes:

  • Patient medical records and PHI
  • Financial statements
  • Insurance and claim data
  • Employee personnel files
  • Proprietary research or IP

3. Enforce Strong Password Policies & MFA

Require complex passwords and enable multi-factor authentication (MFA) to prevent unauthorized logins—even if credentials are leaked.

4. Secure All Endpoints and Devices

Unattended laptops, tablets, or phones are a goldmine for attackers. Make sure all hardware is encrypted, monitored, and physically secured.

5. Partner with a Trusted IT Security Provider

Working with an expert cybersecurity team gives you access to advanced tools, real-time monitoring, and incident response strategies most in-house teams can’t handle alone.

What Happened After the Freedman HealthCare Hack?

Freedman HealthCare quickly brought in third-party cybersecurity experts to assess the damage and harden their infrastructure. So far, there’s no official confirmation of a HIPAA violation—but that doesn’t mean they’re off the hook.

If your organization handles sensitive health or insurance data, this is your warning.

Final Thoughts: It’s Not If You’ll Be Targeted. It’s When

Cyber threats are now a constant part of business life. The only way to stay ahead is to take proactive, layered, and strategic steps today.

Want Expert Help Locking Down Your Data?

At Intelecis, we help healthcare and insurance organizations reduce cyber risk, comply with HIPAA and industry regulations, and sleep better at night knowing their data is secure.